Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10F1B7DC458B11F1A60B8BB4CE1D38B0.roa
File: 10F1B7DC458B11F1A60B8BB4CE1D38B0.roa (raw, json)
Hash identifier: ZVzOAR92fkPnXOecHlJ/WuIt8DVZwV+bvi/TRRcE4+k=
Subject key identifier: E5:22:91:B8:47:2C:CE:E7:F1:D5:A5:50:5E:F0:DF:06:28:63:D5:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C8DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10F1B7DC458B11F1A60B8BB4CE1D38B0.roa
Signing time: Fri 01 May 2026 18:25:02 +0000
ROA not before: Fri 01 May 2026 18:24:57 +0000
ROA not after: Fri 05 Jun 2026 18:24:57 +0000
asID: 202656
IP address blocks: 154.219.214.0/24 maxlen: 24
154.219.215.0/24 maxlen: 24
154.219.216.0/24 maxlen: 24
154.220.1.0/24 maxlen: 24
154.221.1.0/24 maxlen: 24
154.221.53.0/24 maxlen: 24
154.221.54.0/24 maxlen: 24
154.221.55.0/24 maxlen: 24
154.221.62.0/24 maxlen: 24
154.221.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116957 (0x1c8dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 18:24:57 2026 GMT
Not After : Jun 5 18:24:57 2026 GMT
Subject: CN=69f4effd-fbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:78:c5:62:02:a4:f9:bc:99:6b:ec:7c:60:
e5:d7:82:25:90:d9:a0:ac:a1:2d:e0:f4:c8:13:05:
0f:98:95:fa:d7:c9:a2:f9:42:d8:0a:65:09:d7:4e:
a6:18:7d:06:0b:f4:60:c3:35:40:e9:ae:5f:90:89:
b4:4d:03:52:fa:98:d7:51:cc:bd:c8:f4:a6:90:c6:
75:8f:10:ce:78:ad:e2:a4:ce:9b:b0:1f:1e:2e:86:
6f:05:93:a5:41:18:c8:59:f8:27:d4:7b:e8:38:6b:
14:3f:b9:80:95:ae:8a:b8:dd:95:a0:5f:75:c4:3b:
b9:0b:4d:07:a1:0a:7b:0d:68:99:80:ad:3c:39:e0:
e9:49:06:73:a9:f9:28:7f:2e:db:bd:c1:1f:33:f4:
4d:92:c8:8f:92:bb:1e:3c:51:2f:8d:90:5f:b0:9e:
e4:e7:98:a0:ec:6a:92:ef:1e:91:0a:d0:bb:d8:2e:
45:12:81:20:6b:bb:9e:c6:d3:c5:7d:75:ce:29:cf:
23:4a:47:53:37:06:b5:53:99:8a:f6:f6:61:84:c4:
d1:5b:9d:d3:61:4c:1a:92:9a:81:24:7c:75:a2:74:
08:f0:ce:dd:39:50:27:03:a8:c3:2a:7e:74:b5:67:
80:25:5c:bb:02:32:2b:a8:7c:6d:93:73:8f:43:df:
70:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:22:91:B8:47:2C:CE:E7:F1:D5:A5:50:5E:F0:DF:06:28:63:D5:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10F1B7DC458B11F1A60B8BB4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.214.0-154.219.216.255
154.220.1.0/24
154.221.1.0/24
154.221.53.0-154.221.55.255
154.221.62.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:ee:98:f9:11:67:7d:dd:0b:4a:6e:bb:26:cf:8b:1e:07:83:
8d:88:73:7d:74:7f:b7:07:f2:2b:b4:d8:a9:8a:e7:08:74:d9:
a9:d0:8c:b5:04:d9:9a:52:ef:23:cf:01:f1:c2:bf:0b:8c:37:
cc:c8:73:9c:92:38:46:53:75:52:14:f5:27:17:24:c4:8c:6e:
03:52:3a:9d:ba:97:71:dc:07:53:3b:1f:f6:e2:09:de:dc:d3:
ab:9a:af:47:d2:0c:81:8b:31:a1:13:50:d6:7d:09:b2:65:f7:
6b:de:33:76:29:7d:85:cf:45:e4:14:5f:70:ab:3f:55:1f:ac:
b2:dc:f1:5b:45:f8:d1:f7:2b:b4:1f:a6:27:7d:81:10:c7:5a:
4c:76:a9:3f:3c:5a:ea:a6:99:b7:d3:ae:1b:03:3e:7c:27:bf:
84:fb:95:3c:df:b2:4a:70:42:66:e4:ff:20:fb:7c:cc:e2:7c:
65:9c:90:c4:a8:36:b7:ac:57:68:04:e0:ef:54:7f:ba:f4:31:
f8:41:c2:5d:3c:df:e1:48:d0:83:08:9f:e0:cb:ed:da:f4:33:
9a:6d:54:27:38:9a:72:00:27:dc:61:37:79:0d:64:76:96:1a:
19:f6:64:77:6f:72:a2:e4:3f:fd:a4:6a:9b:58:f2:0a:cc:ce:
f6:3b:fb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:31 2026 by rpki-client